---
title: "Discussion on \"BdThemes: A WordPress Supply Chain Attack That Changed No Code At All\" | Hashnode"
description: "Discussion on \"BdThemes: A WordPress Supply Chain Attack That Changed No Code At All\". Summary\nNot a single source code file in the WordPress.org repository was modified. No plugin update was released. No file on disk changed.\nYet rogue administrator accounts were created on victim site"
url: "https://hashnode.com/posts/bdthemes-wordpress-supply-chain-poisoned-json-en/6a86c6975a950cf3d221d002"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [BdThemes: A WordPress Supply Chain Attack That Changed No Code At All](https://blog.fiscybersec.com/bdthemes-wordpress-supply-chain-poisoned-json-en?utm_source=hashnode&utm_medium=feed)

Summary Not a single source code file in the WordPress.org repository was modified. No plugin update was released. No file on disk changed. Yet rogue administrator accounts were created on victim site

Aug 20 · 17 min read · blog.fiscybersec.com  
Read the article

-   [#bdthemes](https://hashnode.com/tag/bdthemes)
-   [#wordpress](https://hashnode.com/tag/wordpress)
-   [#supply-chain](https://hashnode.com/tag/supply-chain)
-   [#elementor](https://hashnode.com/tag/elementor)
-   [#biggopti](https://hashnode.com/tag/biggopti)
-   [#xss](https://hashnode.com/tag/xss)
-   [#web-shell](https://hashnode.com/tag/web-shell)
-   [#mu-plugins](https://hashnode.com/tag/mu-plugins)
-   [#rogue-admin](https://hashnode.com/tag/rogue-admin)
-   [#optinmonster](https://hashnode.com/tag/optinmonster)
-   [#arve](https://hashnode.com/tag/arve)
-   [#cve-2026-18072](https://hashnode.com/tag/cve-2026-18072)
-   [#wordfence](https://hashnode.com/tag/wordfence)
-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)

## Written by

[Vũ Nhật Lâm](https://hashnode.com/@kami61)

@kami61

  
[View profile](https://hashnode.com/@kami61)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.